RE: DSA certificates from windows certificate store into openssl

2012-07-26 Thread Jaaron Anderson
@openssl.org Subject: RE: DSA certificates from windows certificate store into openssl Thanks very much for your clearly laid out and informative note; most of this matches my intuitive understanding of the differences but having it elucidated backed with experience is invaluable, thanks again ... N

Re: DSA certificates from windows certificate store into openssl

2012-07-25 Thread Jakob Bohm
On 24-07-2012 19:31, Nou Dadoun wrote: Hey folks, I recently added a facility to our code base to retrieve a certificate and private key from a windows certificate store (using the windows crypto api) and converted it to a form usable by openssl. The certificate part was easy, the key a

Re: DSA certificates from windows certificate store into openssl

2012-07-25 Thread Jaaron Anderson
Replying to the DSA inquiry yesterday Nou Dadoun First thing is RSA certificate has RSA keys and DSA certificate has Diffie-Hellman (DH) keys. In SSL, Diffie-Hellman is done for key exchange to create in each end a common shared secret. Thereafter, the channel is secure using the secret not the

RE: DSA certificates from windows certificate store into openssl

2012-07-25 Thread Nou Dadoun
- From: Jaaron Anderson [mailto:janders...@widener.edu] Sent: July 25, 2012 8:05 AM To: openssl-users@openssl.org Cc: Nou Dadoun Subject: Re: DSA certificates from windows certificate store into openssl Importance: High Replying to the DSA inquiry yesterday Nou Dadoun First thing is RSA certificate

RE: DSA certificates from windows certificate store into openssl

2012-07-25 Thread Nou Dadoun
Of Jakob Bohm Sent: July 25, 2012 2:22 AM To: openssl-users@openssl.org Subject: Re: DSA certificates from windows certificate store into openssl On 24-07-2012 19:31, Nou Dadoun wrote: Hey folks, I recently added a facility to our code base to retrieve a certificate and private key from a windows

RE: DSA certificates from windows certificate store into openssl

2012-07-24 Thread Nou Dadoun
I'm going to back up and ask an even more basic question which appears to be surprisingly elusive - how is a DSA key/certificate used in establishing an ssl connection? I understand how an RSA key/cert ssl handshake proceeds but if the DSA key is used only for signatures, how is a secure ssl

Re: DSA certificates from windows certificate store into openssl

2012-07-24 Thread Sukalp Bhople
Hi, I will try to answer your question from the second email. Whenever DSA method is used for authentication, it works the pretty much same way it works during the RSA authentication. However, DSA can not be used for key establishment. Unlike in RSA method, RSA is commonly used for dual